$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa File: 01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa (raw, json) Hash identifier: Rkd7ZkcPw5LLhcT9ZCg0TSoVKI5/4Bhe7JrhV5o5Fxs= Subject key identifier: 4C:7E:F1:4B:CD:A8:45:4E:19:90:D8:A6:5F:94:9C:4F:E1:FB:A1:D5 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584A0C055750921BB5F7F26EB580 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 3356 IP address blocks: 8.29.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:57:50:92:1b:b5:f7:f2:6e:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=fb5f5ad2-157d-4310-a377-6867b8eddc3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:98:e5:5f:67:a3:09:cb:37:ad:6f:e1:be:95: 6a:a7:ae:cc:4e:1f:41:3a:a2:85:ad:d5:04:fb:0f: 23:6b:ce:de:46:74:c1:40:cd:11:10:e6:e4:7c:cb: 48:2c:c4:9f:8a:48:98:38:9b:ed:9a:a3:1f:94:34: 10:48:6e:af:15:7e:dd:b2:15:4a:92:82:4a:1d:d7: d7:35:7d:c5:6f:d9:56:c4:3d:11:16:11:6c:7a:62: c3:2a:1d:13:79:76:78:09:e9:08:92:bc:d0:32:2f: bd:5a:ac:fa:d7:e3:8a:ea:36:2f:e0:a3:38:f8:31: c6:06:0e:60:57:42:b0:45:bd:da:04:b0:9f:9c:7e: 42:87:88:91:9a:78:63:92:f5:92:94:82:49:bd:64: a7:f3:c4:f5:0d:b6:ec:41:7b:35:3c:b8:0a:a0:5a: a9:ac:77:cc:39:37:30:9e:24:62:ab:1c:db:92:46: 3e:70:15:d6:38:16:d9:28:1e:ee:46:d0:39:55:21: b1:cb:80:d6:5b:da:f5:f1:43:5c:85:18:1f:a4:97: 38:01:4c:8a:10:f7:77:1a:36:dc:4c:57:52:05:1d: cc:9e:db:f7:8c:07:2f:b4:d3:d2:57:23:2c:e1:91: 7a:4d:32:e6:39:df:13:69:68:89:53:9d:ed:05:f0: 94:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7E:F1:4B:CD:A8:45:4E:19:90:D8:A6:5F:94:9C:4F:E1:FB:A1:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.29.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:79:ab:65:38:03:52:6d:98:0a:59:31:10:17:75:08:4e:01: f3:30:92:7b:a1:8f:d7:05:17:92:8a:1c:f8:f9:07:79:b6:0d: d6:ca:d2:18:23:b7:29:f0:b5:73:ec:89:d6:83:4b:8e:38:2e: 48:a7:51:56:44:6f:e7:8a:68:3c:ac:0c:61:37:2a:a7:01:bf: eb:2c:cb:cd:6c:c2:24:0d:2c:81:20:f4:b1:06:70:fb:74:a3: 82:08:68:3b:5b:b9:79:5f:81:2c:60:76:cb:a9:af:8f:e7:8a: e2:f9:98:fd:25:f6:e6:cb:b3:cf:b2:88:c1:a9:dd:b3:87:81: b0:26:34:96:9e:e9:e0:f8:9e:8a:e6:36:e2:e0:99:fb:e6:98: ed:19:69:80:26:cc:83:14:a6:04:db:7b:11:18:54:35:3d:51: d5:30:97:98:a2:19:60:cf:f7:1d:46:09:2f:b0:33:64:98:05: b3:9d:78:af:8d:13:e8:6c:6c:0a:e4:30:7e:45:e3:34:85:77: 9a:a9:1c:3f:39:9c:9e:b0:e3:d8:7c:2e:bd:a0:16:05:b4:00: 3c:22:22:25:c2:5c:68:62:06:e3:f4:7b:8a:f8:15:ef:ae:b1: 31:82:be:59:04:58:d5:b0:2c:cd:79:98:12:74:e3:d1:59:7c: d7:93:a4:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBVdQkhu19/JutYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZmI1ZjVhZDItMTU3ZC00MzEwLWEzNzctNjg2N2I4ZWRkYzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85jlX2ejCcs3rW/hvpVqp67MTh9BOqKFrdUE +w8ja87eRnTBQM0REObkfMtILMSfikiYOJvtmqMflDQQSG6vFX7dshVKkoJKHdfX NX3Fb9lWxD0RFhFsemLDKh0TeXZ4CekIkrzQMi+9Wqz61+OK6jYv4KM4+DHGBg5g V0KwRb3aBLCfnH5Ch4iRmnhjkvWSlIJJvWSn88T1DbbsQXs1PLgKoFqprHfMOTcw niRiqxzbkkY+cBXWOBbZKB7uRtA5VSGxy4DWW9r18UNchRgfpJc4AUyKEPd3Gjbc TFdSBR3Mntv3jAcvtNPSVyMs4ZF6TTLmOd8TaWiJU53tBfCUAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEx+8UvNqEVOGZDYpl+UnE/h+6HVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMDFiMWUzYzItMDI0NS0z ZTg5LWJhMGItM2NiMWU2ZjU2MjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQECB0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAId5q2U4A1JtmApZMRAXdQhOAfMwknuhj9cFF5KKHPj5B3m2DdbK0hgj tynwtXPsidaDS444LkinUVZEb+eKaDysDGE3KqcBv+ssy81swiQNLIEg9LEGcPt0 o4IIaDtbuXlfgSxgdsupr4/niuL5mP0l9ubLs8+yiMGp3bOHgbAmNJae6eD4norm NuLgmfvmmO0ZaYAmzIMUpgTbexEYVDU9UdUwl5iiGWDP9x1GCS+wM2SYBbOdeK+N E+hsbArkMH5F4zSFd5qpHD85nJ6w49h8Lr2gFgW0ADwiIiXCXGhiBuP0e4r4Fe+u sTGCvlkEWNWwLM15mBJ049FZfNeTpOE= -----END CERTIFICATE-----Generated at Tue Jun 17 00:51:19 2025 by rpki-client